Enhanced Security Update

Size: px

Start display at page:

Download "Enhanced Security Update"

Andra Rice
9 years ago
Views:

1 Enhanced Security Update Informational Webex Foluso Afelumo Project Manager 9/21/2015

2 Purpose Present information relevant to the implementation of PJMs enhanced security initiative Why the change What is changing What are the impacts Provide answers to any questions 2

3 Why Cybersecurity is important to PJM. Security of member data Security of member interaction PJM is working to implement industry best practices around security. We are making changes toward a long-term solution that will make it easier to do business with PJM more securely. 3

to implement industry best practices around security.

4 Scope Implement strong access controls User credentials/privileges System accounts Self-service enhancements Multi-factor authentication 4

5 Scope Implement enhanced security for PJM Tools Implement enterprise-wide single sign-on capability Provide enhanced user identity and access management Provide standardized security policies across applications 5

Provide enhanced user identity and access management

6 Browserless Definition of terms Indicates accessing an application without the use of a browser PJM CLI Command line interface. Also known as pjm-cli. MFA Multi factor authentication. Mechanism whereby access to a tool is granted with a combination of user/name password and a secondary piece information. 6

7 System Account/Id Definition of terms An account (username/password) used to access PJM tools to perform automatic uploads/downloads of data. Does not require human interaction via web browser. Also known as accounts for browserless access. User Account/Id An account (username/password) used to access PJM tools via a web browser. Single Sign on (SSO) Implementation of authentication mechanism where a single log on allows access to multiple tools without re-authentication. 7

Also known as accounts for browserless access.

8 Details of changes What: SSO upgrade for Gas Pipeline, Bulletin Board, Messages Impact: You will have to log into these applications separately from the other refreshed applications. Current way of browserless authentication will stop working. Update custom browserless code according to specifications. Update to latest version of PJM CLI. Train/Sandbox: 7/30/2015 Production: 9/9/2015 8

Current way of browserless authentication will stop working.

9 Details of changes What: System Account Designation/Creation. Impact: Will need to have 10 character password length minimum. Will not be required to change passwords every 128 days. Will not be able to access tools through browsers starting Q Designate accounts as System Ids whose passwords should not change every 128 days. Train/Sandbox: 8/11/2015 Production:9/15/2015 9

Will not be required to change passwords every 128 days.

10 Details of changes What: Password Policy Impact: Minimum password length increased to 10 characters. User accounts are required to change passwords every 128 days. System accounts should change passwords once to meet requirement. Change passwords every 128 days for user accounts. Designate/create system Ids with minimum password length to avoid impact. Train/Sandbox: 9/17/2015 Production: 10/29/

System accounts should change passwords once to meet requirement.

11 Details of changes What: Self Service Password Reset Value Add: Allow users to reset their passwords without requiring CAM intervention. Answer 5 questions on profile page. Train/Sandbox: 9/30/2015 Production: 11/5/

12 What: Details of changes SSO upgrade for Account Manager, Data Viewer, Data Miner, Exschedule, InSchedule, Power Meter, Resource Tracker, PCLLRW, ToolsHome Impact: This is the balance of SSO upgrades for refreshed applications. All refreshed applications will function on same SSO. Current way of browserless authentication will stop working. Update custom browserless code according to specifications. Update to latest version of PJM CLI. Train/Sandbox: 10/1/2015 Production: 11/2/

All refreshed applications will function on same SSO. Current way of browserless authentication will stop working.

13 Details of changes What: SSO upgrade for legacy esuite applications (emkt, eftr, erpm, OASIS ) Impact: You will be unable to log into these applications by logging into esuite. User interface to log into these applications will be different. SSO will work across all PJM tools. None. Train/Sandbox: 11/17/2015 Production: 12/15/

into esuite. User interface to log into these applications will be different.

14 Details of changes What: Timeout restrictions Impact: Inactivity on screens will lead to timeout and re-authentication. None. Train/Sandbox: 11/17/2015 Production: 12/17/

15 Details of changes What: Multi Factor Authentication (MFA) Impact: Access to account manager by CAMs will require providing an extra factor for authentication. None. Train/Sandbox: 12/2/2015 Production: 2/17/

require providing an extra factor for authentication.

16 Details of changes What: Disable Inactive Accounts Impact: Accounts that haven t accessed any PJM tools within 6 months will be disabled. Use accounts to access PJM tools at least once every 6 months. Train/Sandbox: Q Production: Q

17 More Information FAQs: Browserless authentication specification: Latest PJM CLI Account Manager user guide: Please contact the tools security team at with questions. 17

ashx Latest PJM CLI http://pjm.com/~/media/etools/exschedule/pjm-command-line-interface-java-6.

Account Manager - System IDs. Prepared by: Markets Applications Effective Date: July 7, 2016

Account Manager - System IDs. Prepared by: Markets Applications Effective Date: July 7, 2016 Account Manager - System IDs Prepared by: Markets Applications Effective Date: July 7, 2016 Table of Contents PJM User Guide Account Manager - System IDs Table of Contents... 0 Section 1: System IDs...